more reliable and performant session storage. Avoid race conditions by setting resave: false. Since we are using the latest connect-mongo, which supports "touch" operations that do not alter the session data but just refresh the expiration time, we can do this right in 3.x. No need for the crazy "durable sessions" and "read-only session just for this request" hacks in 2.x. Hugs to Past Tom for leaving a trail of bread crumbs next to those hacks reminding us to do it this way instead in 3.x.
more reliable and performant session storage. Avoid race conditions by setting resave: false. Since we are using the latest connect-mongo, which supports "touch" operations that do not alter the session data but just refresh the expiration time, we can do this right in 3.x. No need for the crazy "durable sessions" and "read-only session just for this request" hacks in 2.x. Hugs to Past Tom for leaving a trail of bread crumbs next to those hacks reminding us to do it this way instead in 3.x.

punkave/apostrophe,punkave/apostrophe